How to create a self-signed SSL Certificate with SubjectAltName(SAN) After Chrome 58, self-signed certificate without SAN is not valid anymore. Step 1: Generate a Private Key openssl genrsa -des3 -out example.com.key 2048 Step 2: Generate a CSR (Certificate Signing Request)